Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
File:                     UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft (raw, json)
Hash identifier:          05JyZhRwopgGWz07HRFh8oRmF8GYgSg/KmUQYehqNSM=
Subject key identifier:   BF:B2:E6:18:86:11:A0:48:90:51:5F:05:EF:6D:BF:00:EE:4E:80:E7
Authority key identifier: 51:F1:BB:81:33:AC:D1:8F:E7:F5:DF:6C:35:0C:44:3A:6D:95:79:75
Certificate issuer:       /CN=51F1BB8133ACD18FE7F5DF6C350C443A6D957975
Certificate serial:       0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
Manifest number:          041C
Signing time:             Mon 28 Apr 2025 19:54:39 +0000
Manifest this update:     Mon 28 Apr 2025 19:54:39 +0000
Manifest next update:     Tue 13 May 2025 19:54:39 +0000
Files and hashes:         1: UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl (hash: EwxTccQPr7NNoT2t8Vh2HpB1itjG6NDkfqh9sbYIgIE=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F1BB8133ACD18FE7F5DF6C350C443A6D957975
        Validity
            Not Before: Apr 15 01:32:06 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=BFB2E6188611A04890515F05EF6DBF00EE4E80E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:9f:86:1c:09:3f:8d:32:e0:f5:32:3b:69:
                    f6:57:17:aa:9b:8f:85:af:2f:89:2b:76:be:a5:94:
                    43:80:57:d3:99:73:05:d6:db:f1:82:5d:ae:76:e0:
                    9a:be:e9:56:c2:88:d3:fa:10:54:e3:c8:81:22:57:
                    20:30:7a:6b:44:04:5b:23:a2:08:2f:f7:dc:6d:7f:
                    d9:24:02:93:d3:2d:ea:4d:e2:02:b6:81:a1:91:bc:
                    8a:6e:e1:7b:ba:81:99:1b:89:21:e4:00:ee:47:f6:
                    87:66:a6:73:0c:28:37:84:5c:ea:71:5c:c0:54:df:
                    5d:b8:38:7f:19:02:8e:b2:2a:2a:c1:f1:0a:d3:d1:
                    c5:cd:22:8a:89:66:29:18:4d:4b:30:c6:86:92:36:
                    aa:ef:23:f4:c0:6c:ac:76:5c:5f:a8:8f:fc:87:14:
                    e4:5e:2a:26:aa:a3:f8:7a:7b:da:a0:3b:49:64:4e:
                    52:49:59:28:8a:76:b2:d5:95:f4:82:d8:dd:58:bc:
                    2f:f4:4f:29:98:59:07:01:0e:f3:17:5a:43:4f:93:
                    8b:46:80:f1:d5:21:27:92:35:82:7d:a7:83:75:71:
                    50:44:ac:76:b5:e6:f3:88:ce:92:59:86:cc:d3:d5:
                    1a:d8:7f:7c:21:ee:e8:85:3d:05:96:72:b7:49:98:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:E6:18:86:11:A0:48:90:51:5F:05:EF:6D:BF:00:EE:4E:80:E7
            X509v3 Authority Key Identifier:
                keyid:51:F1:BB:81:33:AC:D1:8F:E7:F5:DF:6C:35:0C:44:3A:6D:95:79:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:74:e7:91:a2:0a:4d:70:a6:7e:81:5b:0a:32:f3:9d:28:
         2b:6c:fb:a0:9c:27:07:a3:8c:7e:52:d6:8e:fb:b5:74:03:81:
         85:a1:59:b7:a6:f8:e3:47:0f:4d:e5:7f:34:04:03:11:05:f1:
         22:96:8b:18:65:bb:69:0a:d3:52:72:3a:83:0e:89:09:bb:db:
         d3:f5:be:df:af:63:29:49:42:fd:12:44:d2:d6:75:51:f4:6e:
         a0:09:ef:f4:17:15:12:0e:bb:8d:0f:42:ae:7b:6a:4c:6e:4d:
         0d:41:87:a5:61:bd:5f:1b:fc:04:1c:bf:4b:5b:1f:77:84:48:
         52:cb:e3:b1:e0:a1:e4:d0:93:3a:6a:26:19:dd:d8:f8:34:6c:
         e9:dc:eb:f0:dc:b2:3e:c8:2c:ca:27:8f:3c:52:1e:40:37:14:
         6b:16:9b:59:b1:5d:29:76:05:98:8b:59:4a:f0:e9:bb:1b:c1:
         a7:0f:28:ed:96:5a:eb:0b:8d:8d:15:31:e7:b9:08:7e:94:9d:
         5f:43:73:2a:50:51:12:e7:94:8e:74:af:cf:29:1d:df:bf:2e:
         cf:c4:23:fb:83:c7:84:e6:80:fb:f2:2e:21:73:47:d1:7b:fc:
         bf:ba:b7:65:d7:ef:00:d1:1a:93:67:3c:f9:39:91:ec:f5:f2:
         de:0a:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:53 2025 by rpki-client on console.sobornost.net